last executing test programs: 6.787790052s ago: executing program 3 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x8, 0x4008}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0x69) 3.506513006s ago: executing program 3 (id=332): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xb9, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x8, 0x0, 0x0}}, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendmmsg$inet(r0, &(0x7f0000020a00)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c05c", 0x14}], 0x1}}], 0x1, 0x0) 3.484862458s ago: executing program 3 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) getpriority(0x1, 0x0) 3.309004523s ago: executing program 3 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r3, r2, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/138, 0x8a}], 0x1) 3.203086322s ago: executing program 3 (id=393): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$unix(0x1, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x141b, {0x8, 0x2}, 0x7, 0x0, 0x0, 0x3, 0xda6, 0x6, 0x63, 0x7, 0xffffffff80000000, 0xfff, 0x2, 0xb2, 0x2, 0x4, 0x4, 0x4, 0x1f, 0xfffffffffffffff9}}, 0xa0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) gettid() r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedreceive(r0, &(0x7f0000000440)=""/121, 0x79, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000000840)=""/29, 0x1d, 0x0, 0x0) 2.350044983s ago: executing program 3 (id=435): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.280636893s ago: executing program 2 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r2, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r3 = dup2(r2, r1) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=@newtaction={0x5e0, 0x30, 0x0, 0x0, 0x0, {}, [{0x178, 0x1, [@m_sample={0x174, 0x0, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8}]}, {0xe5, 0x6, "f299a77521cdd7684bbf42e7a9364be4e9effbc3172e0b5347eee2a5d77f4eb53d9354aab2226073faf25893c5d4ebef59b5ba29c214462fda64ca031636a4d7c6241b0fe386b8b06a7d7e8ca641b9a24298c4deacb9b000bea72838bd8235e80acd1d1f69c064340167750c89ae45a699360e0ecccc93806c86814accebc7efd31e9b0b45b5507ac0dc741be5f2c6c8ac7f5fc53c5be94fe708062d495fb241a846c532710855728c4d80b1f67cd86eeb7215d46364e559f60748bcf4b77be58b9935dbb0db7426daa66f1712122dd4a37bfba726995bf40c3a9a5d46d7150343"}, {0xc}, {0xc}}}]}, {0x454, 0x1, [@m_police={0x450, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]]}, {0x1d, 0x6, "776cf703ce12f8b10ec330c5ed98c1d7d5ef9cdb8eba4e4c1a"}, {0xc}, {0xc}}}]}]}, 0x5e0}}, 0x0) 1.238704756s ago: executing program 4 (id=455): fspick(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1.188293481s ago: executing program 4 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.185841901s ago: executing program 2 (id=457): perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000017e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) 1.165495872s ago: executing program 2 (id=458): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.145557974s ago: executing program 4 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000040), &(0x7f0000000180)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 1.07750422s ago: executing program 4 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000140)={0xf97cff8c, 0x8}, 0x10) 871.998937ms ago: executing program 4 (id=467): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getpid() fchdir(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000200020000004701010100000000000000000d0001007564703a"], 0x54}}, 0x0) 634.053217ms ago: executing program 2 (id=468): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000192c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000026c0)='?', 0xd0b9, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 608.084139ms ago: executing program 2 (id=469): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f00000003c0)={[{@abort}, {@dioread_nolock}, {@nobh}, {@jqfmt_vfsv1}, {@nobh}, {@usrjquota, 0x2e}, {@grpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") 513.246477ms ago: executing program 2 (id=471): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) 506.085667ms ago: executing program 4 (id=472): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x0) 478.9907ms ago: executing program 0 (id=474): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001080)="6c650f65b1c2e50289c47f687af67ac2cb870e0c0e19205f06e1a5cdb3a538d7ccd46e2aca132e6ae6228ce098", 0x2d}, {&(0x7f0000001700)="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", 0x523}, {&(0x7f00000012c0)="5b41bbacc8067171abb6d380d8ff26a3367823c2ecfc93c5adb4dba0606570a2e427a3f4a61f02fbb7620165a7a91e3586", 0x31}], 0x3}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001440)=']', 0x1}], 0x1}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=[0x7], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) recvfrom$inet(r0, &(0x7f0000000980)=""/229, 0xe5, 0x0, 0x0, 0x0) 398.164057ms ago: executing program 1 (id=475): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x50000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_open_dev$usbfs(&(0x7f0000000000), 0x8001ff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x6808b, &(0x7f0000000700), 0x5, 0x5fa, &(0x7f00000022c0)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) 306.681004ms ago: executing program 1 (id=476): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000020000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe2b) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000002300)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) 243.60842ms ago: executing program 0 (id=477): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@discard}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 242.867779ms ago: executing program 1 (id=478): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xffffffff}, 0x0, 0x0, 0x0, 0x3, 0xd57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x400009, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 222.460351ms ago: executing program 1 (id=479): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "be00", "00000c70423a000000000000ffff00", "ec69d337", "df02000000000ece"}, 0x28) 164.178966ms ago: executing program 0 (id=480): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') read$msr(r0, &(0x7f0000000040)=""/59, 0xffb5) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/13, 0xd}], 0x2}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xd0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400000000000117, 0x0) 122.98236ms ago: executing program 1 (id=481): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 116.55626ms ago: executing program 0 (id=482): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 49.683066ms ago: executing program 0 (id=483): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xef) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 279.6µs ago: executing program 0 (id=484): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x77, &(0x7f0000000340)={r1, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}}, 0x0) 0s ago: executing program 1 (id=485): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000d80), 0x208e24b) fdatasync(r2) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 17.711477][ T29] audit: type=1400 audit(1725868763.698:81): avc: denied { read } for pid=2942 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 20.828654][ T29] audit: type=1400 audit(1725868766.808:82): avc: denied { mounton } for pid=3244 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.829601][ T3244] cgroup: Unknown subsys name 'net' [ 20.851354][ T29] audit: type=1400 audit(1725868766.808:83): avc: denied { mount } for pid=3244 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.878778][ T29] audit: type=1400 audit(1725868766.838:84): avc: denied { unmount } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.017932][ T3244] cgroup: Unknown subsys name 'rlimit' [ 21.140336][ T29] audit: type=1400 audit(1725868767.118:85): avc: denied { setattr } for pid=3244 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.163624][ T29] audit: type=1400 audit(1725868767.118:86): avc: denied { create } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.184322][ T29] audit: type=1400 audit(1725868767.118:87): avc: denied { write } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.191923][ T3251] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.204635][ T29] audit: type=1400 audit(1725868767.118:88): avc: denied { read } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.204655][ T29] audit: type=1400 audit(1725868767.128:89): avc: denied { mounton } for pid=3244 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.204675][ T29] audit: type=1400 audit(1725868767.128:90): avc: denied { mount } for pid=3244 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.281569][ T29] audit: type=1400 audit(1725868767.198:91): avc: denied { relabelto } for pid=3251 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.309344][ T3244] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.891139][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 22.930040][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 22.944758][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 22.984517][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 23.004958][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.012110][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.019462][ T3258] bridge_slave_0: entered allmulticast mode [ 23.025806][ T3258] bridge_slave_0: entered promiscuous mode [ 23.044286][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.051371][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.058477][ T3258] bridge_slave_1: entered allmulticast mode [ 23.064711][ T3258] bridge_slave_1: entered promiscuous mode [ 23.073008][ T3257] chnl_net:caif_netlink_parms(): no params data found [ 23.107100][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.114214][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.121411][ T3262] bridge_slave_0: entered allmulticast mode [ 23.127676][ T3262] bridge_slave_0: entered promiscuous mode [ 23.144636][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.151773][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.159113][ T3261] bridge_slave_0: entered allmulticast mode [ 23.165409][ T3261] bridge_slave_0: entered promiscuous mode [ 23.171619][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.178717][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.185832][ T3262] bridge_slave_1: entered allmulticast mode [ 23.192182][ T3262] bridge_slave_1: entered promiscuous mode [ 23.203429][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.227669][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.234828][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.241976][ T3261] bridge_slave_1: entered allmulticast mode [ 23.248496][ T3261] bridge_slave_1: entered promiscuous mode [ 23.259638][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.272210][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.279440][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.286690][ T3266] bridge_slave_0: entered allmulticast mode [ 23.293134][ T3266] bridge_slave_0: entered promiscuous mode [ 23.304703][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.326049][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.333170][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.340369][ T3266] bridge_slave_1: entered allmulticast mode [ 23.346794][ T3266] bridge_slave_1: entered promiscuous mode [ 23.358284][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.372227][ T3257] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.379354][ T3257] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.386521][ T3257] bridge_slave_0: entered allmulticast mode [ 23.392827][ T3257] bridge_slave_0: entered promiscuous mode [ 23.404143][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.418512][ T3258] team0: Port device team_slave_0 added [ 23.424252][ T3257] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.431316][ T3257] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.438565][ T3257] bridge_slave_1: entered allmulticast mode [ 23.445030][ T3257] bridge_slave_1: entered promiscuous mode [ 23.456216][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.475274][ T3258] team0: Port device team_slave_1 added [ 23.489905][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.507521][ T3262] team0: Port device team_slave_0 added [ 23.518538][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.525472][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.551380][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.562890][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.573099][ T3257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.587602][ T3261] team0: Port device team_slave_0 added [ 23.598125][ T3262] team0: Port device team_slave_1 added [ 23.604108][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.611076][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.637014][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.650838][ T3257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.661683][ T3261] team0: Port device team_slave_1 added [ 23.668107][ T3266] team0: Port device team_slave_0 added [ 23.696080][ T3266] team0: Port device team_slave_1 added [ 23.711044][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.718083][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.743971][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.760807][ T3258] hsr_slave_0: entered promiscuous mode [ 23.766736][ T3258] hsr_slave_1: entered promiscuous mode [ 23.773152][ T3257] team0: Port device team_slave_0 added [ 23.783386][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.790432][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.816394][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.827495][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.834475][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.860571][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.880160][ T3257] team0: Port device team_slave_1 added [ 23.891461][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.898558][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.924453][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.957001][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.963968][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.989926][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.001107][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.008271][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.034173][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.060440][ T3262] hsr_slave_0: entered promiscuous mode [ 24.066343][ T3262] hsr_slave_1: entered promiscuous mode [ 24.072348][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.079922][ T3262] Cannot create hsr debugfs directory [ 24.089672][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.096712][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.122592][ T3257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.143126][ T3261] hsr_slave_0: entered promiscuous mode [ 24.149352][ T3261] hsr_slave_1: entered promiscuous mode [ 24.155192][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.162755][ T3261] Cannot create hsr debugfs directory [ 24.168476][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.175410][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.201386][ T3257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.252619][ T3257] hsr_slave_0: entered promiscuous mode [ 24.258853][ T3257] hsr_slave_1: entered promiscuous mode [ 24.264680][ T3257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.272278][ T3257] Cannot create hsr debugfs directory [ 24.286264][ T3266] hsr_slave_0: entered promiscuous mode [ 24.292457][ T3266] hsr_slave_1: entered promiscuous mode [ 24.298403][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.306153][ T3266] Cannot create hsr debugfs directory [ 24.391819][ T3258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.402149][ T3258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.432196][ T3258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.443689][ T3258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.497443][ T3262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.516462][ T3262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.534533][ T3262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.543430][ T3261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.552161][ T3261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.560693][ T3262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.574161][ T3261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.582904][ T3261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.614088][ T3266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.623020][ T3266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.631622][ T3266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.640522][ T3266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.669025][ T3257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.677647][ T3257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.687428][ T3257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.696167][ T3257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.760279][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.791649][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.800743][ T3257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.813332][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.824542][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.834042][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.845800][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.860127][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.867213][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.875744][ T3257] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.884963][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.898746][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.905769][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.914273][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.921330][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.929639][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.936668][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.945690][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.952788][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.964110][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.980583][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.987631][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.996793][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.003902][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.024541][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.031624][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.044009][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.051121][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.073752][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.080813][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.201857][ T3257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.219616][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.245491][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.255416][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.334606][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.351200][ T3257] veth0_vlan: entered promiscuous mode [ 25.375640][ T3257] veth1_vlan: entered promiscuous mode [ 25.420171][ T3257] veth0_macvtap: entered promiscuous mode [ 25.438876][ T3257] veth1_macvtap: entered promiscuous mode [ 25.453508][ T3266] veth0_vlan: entered promiscuous mode [ 25.466910][ T3261] veth0_vlan: entered promiscuous mode [ 25.478636][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.489383][ T3261] veth1_vlan: entered promiscuous mode [ 25.504567][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.513077][ T3266] veth1_vlan: entered promiscuous mode [ 25.532266][ T3257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.541173][ T3257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.549890][ T3257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.558724][ T3257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.571493][ T3262] veth0_vlan: entered promiscuous mode [ 25.581181][ T3262] veth1_vlan: entered promiscuous mode [ 25.601939][ T3258] veth0_vlan: entered promiscuous mode [ 25.609812][ T3261] veth0_macvtap: entered promiscuous mode [ 25.623307][ T3266] veth0_macvtap: entered promiscuous mode [ 25.634921][ T3261] veth1_macvtap: entered promiscuous mode [ 25.641882][ T3258] veth1_vlan: entered promiscuous mode [ 25.649615][ T3266] veth1_macvtap: entered promiscuous mode [ 25.661080][ T3262] veth0_macvtap: entered promiscuous mode [ 25.678353][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.688904][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.700174][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.709198][ T3262] veth1_macvtap: entered promiscuous mode [ 25.716528][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.727059][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.738011][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.749241][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.759711][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.769574][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.779996][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.797098][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.818709][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.829342][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.839196][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.849928][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.862425][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.871758][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.881669][ T3407] loop3: detected capacity change from 0 to 512 [ 25.882243][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.898340][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.908868][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.918727][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.929194][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.939746][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.941517][ T3407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.963932][ T3258] veth0_macvtap: entered promiscuous mode [ 25.969920][ T3407] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 25.970014][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 25.970036][ T29] audit: type=1400 audit(1725868771.958:127): avc: denied { mount } for pid=3406 comm="syz.3.7" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.994369][ T3261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.008605][ T29] audit: type=1400 audit(1725868771.968:128): avc: denied { write } for pid=3406 comm="syz.3.7" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.015990][ T3261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.037275][ T29] audit: type=1400 audit(1725868771.968:129): avc: denied { add_name } for pid=3406 comm="syz.3.7" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.046000][ T3261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.087492][ T29] audit: type=1400 audit(1725868771.968:130): avc: denied { create } for pid=3406 comm="syz.3.7" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 26.096128][ T3261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.106543][ T3266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.154791][ T3266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.163613][ T3266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.172525][ T3266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.184190][ T29] audit: type=1400 audit(1725868772.158:131): avc: denied { create } for pid=3406 comm="syz.3.7" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.197198][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.215767][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.225613][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.236176][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.246072][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.256769][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.266305][ T29] audit: type=1400 audit(1725868772.158:132): avc: denied { read append open } for pid=3406 comm="syz.3.7" path="/2/bus/cgroup.controllers" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.271104][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.290699][ T29] audit: type=1400 audit(1725868772.208:133): avc: denied { write } for pid=3406 comm="syz.3.7" name="cgroup.controllers" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.290722][ T29] audit: type=1400 audit(1725868772.218:134): avc: denied { ioctl } for pid=3406 comm="syz.3.7" path="/2/bus/cpuset.effective_mems" dev="loop3" ino=21 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.299825][ T3258] veth1_macvtap: entered promiscuous mode [ 26.351645][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.377101][ T3262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.385824][ T3262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.394694][ T3262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.403586][ T3262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.432423][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.442934][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.452938][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.463375][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.473296][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.483716][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.493669][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.504148][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.532386][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.539740][ T29] audit: type=1400 audit(1725868772.508:135): avc: denied { open } for pid=3415 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.558865][ T29] audit: type=1400 audit(1725868772.508:136): avc: denied { kernel } for pid=3415 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.588848][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.599447][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.609321][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.619762][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.629648][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.640113][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.649925][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.660447][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.672811][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.712492][ T3258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.721241][ T3258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.730073][ T3258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.738959][ T3258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.971962][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.979631][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.999430][ T3336] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 27.086173][ T3452] loop2: detected capacity change from 0 to 1024 [ 27.121049][ T3452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 27.130581][ T3461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.140969][ T3452] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 27.149909][ T3452] System zones: 0-1, 3-36 [ 27.155584][ T3452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.180530][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.222153][ T3464] loop2: detected capacity change from 0 to 512 [ 27.243141][ T3464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.270886][ T3464] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.290640][ T3472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 27.297939][ T3472] IPv6: NLM_F_CREATE should be set when creating new route [ 27.305143][ T3472] IPv6: NLM_F_CREATE should be set when creating new route [ 27.312389][ T3472] IPv6: NLM_F_CREATE should be set when creating new route [ 27.316223][ T3464] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.20: corrupted inode contents [ 27.347405][ T3471] bridge0: port 3(bond0) entered blocking state [ 27.353714][ T3471] bridge0: port 3(bond0) entered disabled state [ 27.354046][ T3464] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.20: mark_inode_dirty error [ 27.360407][ T3471] bond0: entered allmulticast mode [ 27.376175][ T3471] bond_slave_0: entered allmulticast mode [ 27.382060][ T3471] bond_slave_1: entered allmulticast mode [ 27.384804][ T3464] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.20: corrupted inode contents [ 27.389484][ T3471] bond0: entered promiscuous mode [ 27.404393][ T3471] bond_slave_0: entered promiscuous mode [ 27.410241][ T3471] bond_slave_1: entered promiscuous mode [ 27.420702][ T3471] bridge0: port 3(bond0) entered blocking state [ 27.427056][ T3471] bridge0: port 3(bond0) entered forwarding state [ 27.455038][ T3464] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.20: Directory hole found for htree leaf block 0 [ 27.471591][ T3464] syz.2.20 (3464) used greatest stack depth: 11280 bytes left [ 27.502666][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.717021][ T3498] tipc: Started in network mode [ 27.721923][ T3498] tipc: Node identity 2, cluster identity 4711 [ 27.728308][ T3498] tipc: Node number set to 2 [ 27.802445][ T3503] loop2: detected capacity change from 0 to 256 [ 27.820242][ T3503] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 27.864061][ T3503] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.917331][ T3476] syz.0.25 (3476) used greatest stack depth: 11008 bytes left [ 27.924869][ T3479] syz.0.25 (3479) used greatest stack depth: 10496 bytes left [ 27.960551][ T3514] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 27.970145][ T3517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 28.109028][ T3532] Illegal XDP return value 4294967274 on prog (id 42) dev N/A, expect packet loss! [ 28.113270][ T3534] loop1: detected capacity change from 0 to 1024 [ 28.146310][ T3534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.166657][ T3534] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.287353][ T3549] loop2: detected capacity change from 0 to 128 [ 28.368921][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.435892][ T3558] loop3: detected capacity change from 0 to 2048 [ 28.452896][ T3565] netlink: 'syz.1.63': attribute type 5 has an invalid length. [ 28.533048][ T3558] loop3: unable to read partition table [ 28.544963][ T3558] loop3: partition table beyond EOD, truncated [ 28.551314][ T3558] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 28.575114][ T3574] netlink: 'syz.0.66': attribute type 10 has an invalid length. [ 28.585615][ T3574] team0: Failed to send options change via netlink (err -105) [ 28.593211][ T3574] team0: Port device netdevsim1 added [ 28.611881][ T3575] Zero length message leads to an empty skb [ 28.658514][ T2960] loop3: unable to read partition table [ 28.664392][ T2960] loop3: partition table beyond EOD, truncated [ 28.776116][ T3595] syzkaller0: entered promiscuous mode [ 28.781864][ T3595] syzkaller0: entered allmulticast mode [ 28.804275][ T3605] loop3: detected capacity change from 0 to 1024 [ 28.824885][ T3605] ======================================================= [ 28.824885][ T3605] WARNING: The mand mount option has been deprecated and [ 28.824885][ T3605] and is ignored by this kernel. Remove the mand [ 28.824885][ T3605] option from the mount to silence this warning. [ 28.824885][ T3605] ======================================================= [ 28.862842][ T3605] EXT4-fs: Ignoring removed nobh option [ 28.889182][ T3612] loop1: detected capacity change from 0 to 512 [ 28.894965][ T3605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.917867][ T3612] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.80: casefold flag without casefold feature [ 28.930638][ T3612] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.80: couldn't read orphan inode 15 (err -117) [ 28.944200][ T3612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.964988][ T3257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.996391][ T3612] loop1: detected capacity change from 512 to 64 [ 29.005260][ T3621] loop3: detected capacity change from 0 to 512 [ 29.019145][ T3612] syz.1.80: attempt to access beyond end of device [ 29.019145][ T3612] loop1: rw=2051, sector=86, nr_sectors = 2 limit=64 [ 29.032462][ T3612] EXT4-fs (loop1): discard request in group:0 block:42 count:1 failed with -5 [ 29.033700][ T3621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.042377][ T3612] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 29.054044][ T3621] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.066763][ T3612] syz.1.80: attempt to access beyond end of device [ 29.066763][ T3612] loop1: rw=2051, sector=84, nr_sectors = 2 limit=64 [ 29.085401][ T3612] EXT4-fs (loop1): discard request in group:0 block:41 count:1 failed with -5 [ 29.094586][ T3612] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 29.098063][ T3621] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 29.103105][ T3612] syz.1.80: attempt to access beyond end of device [ 29.103105][ T3612] loop1: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 29.130101][ T3621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 29.130128][ T3621] EXT4-fs (loop3): This should not happen!! Data will be lost [ 29.130128][ T3621] [ 29.130140][ T3621] EXT4-fs (loop3): Total free blocks count 0 [ 29.142448][ T3612] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 29.152126][ T3621] EXT4-fs (loop3): Free/Dirty block details [ 29.158046][ T3612] Buffer I/O error on device loop1, logical block 255 [ 29.169215][ T3621] EXT4-fs (loop3): free_blocks=65280 [ 29.175526][ T3612] syz.1.80: attempt to access beyond end of device [ 29.175526][ T3612] loop1: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 29.182004][ T3621] EXT4-fs (loop3): dirty_blocks=23 [ 29.187195][ T3612] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 29.200270][ T3621] EXT4-fs (loop3): Block reservation details [ 29.205362][ T3612] Buffer I/O error on device loop1, logical block 253 [ 29.216570][ T3621] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 29.222500][ T3612] Buffer I/O error on device loop1, logical block 254 [ 29.242419][ T3612] syz.1.80: attempt to access beyond end of device [ 29.242419][ T3612] loop1: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 29.242519][ T3621] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 29.255545][ T3612] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 29.279168][ T3612] Buffer I/O error on device loop1, logical block 37 [ 29.285848][ T3612] Buffer I/O error on device loop1, logical block 38 [ 29.288148][ T3621] syz.3.82 (3621) used greatest stack depth: 9768 bytes left [ 29.292503][ T3612] Buffer I/O error on device loop1, logical block 39 [ 29.292515][ T3612] Buffer I/O error on device loop1, logical block 40 [ 29.294732][ T3612] syz.1.80: attempt to access beyond end of device [ 29.294732][ T3612] loop1: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 29.326433][ T3612] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 29.337733][ T3612] Buffer I/O error on device loop1, logical block 249 [ 29.344512][ T3612] Buffer I/O error on device loop1, logical block 250 [ 29.351263][ T3612] Buffer I/O error on device loop1, logical block 251 [ 29.358066][ T3612] syz.1.80: attempt to access beyond end of device [ 29.358066][ T3612] loop1: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 29.371181][ T3612] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 29.411260][ T3258] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 29.435197][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.687942][ T3642] geneve0: entered allmulticast mode [ 29.714653][ T3644] loop4: detected capacity change from 0 to 512 [ 29.738442][ T3644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 29.751033][ T3644] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.772217][ T3262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 29.869910][ T3654] loop4: detected capacity change from 0 to 128 [ 29.889903][ T3654] syz.4.96: attempt to access beyond end of device [ 29.889903][ T3654] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 30.009561][ T3660] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 30.982148][ T320] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.007248][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 31.007259][ T29] audit: type=1400 audit(1725868776.988:382): avc: denied { connect } for pid=3678 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.049119][ T29] audit: type=1400 audit(1725868776.988:383): avc: denied { mounton } for pid=3680 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 31.071824][ T320] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.143495][ T320] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.195816][ T320] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.196039][ T29] audit: type=1400 audit(1725868777.168:384): avc: denied { write } for pid=3695 comm="syz.4.110" name="fd" dev="proc" ino=5206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 31.227270][ T29] audit: type=1400 audit(1725868777.168:385): avc: denied { add_name } for pid=3695 comm="syz.4.110" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 31.247139][ T29] audit: type=1400 audit(1725868777.168:386): avc: denied { create } for pid=3695 comm="syz.4.110" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 31.268341][ T29] audit: type=1400 audit(1725868777.168:387): avc: denied { associate } for pid=3695 comm="syz.4.110" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.290736][ T29] audit: type=1400 audit(1725868777.248:388): avc: denied { read } for pid=3697 comm="syz.4.111" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 31.292382][ T3680] chnl_net:caif_netlink_parms(): no params data found [ 31.314113][ T29] audit: type=1400 audit(1725868777.248:389): avc: denied { open } for pid=3697 comm="syz.4.111" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 31.314138][ T29] audit: type=1400 audit(1725868777.248:390): avc: denied { ioctl } for pid=3697 comm="syz.4.111" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 31.375630][ T29] audit: type=1400 audit(1725868777.358:391): avc: denied { mount } for pid=3700 comm="syz.4.113" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 31.434796][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.441919][ T3680] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.449753][ T3680] bridge_slave_0: entered allmulticast mode [ 31.456174][ T3680] bridge_slave_0: entered promiscuous mode [ 31.470468][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.477685][ T3680] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.484872][ T3680] bridge_slave_1: entered allmulticast mode [ 31.493523][ T3680] bridge_slave_1: entered promiscuous mode [ 31.509546][ T3710] syz.0.116[3710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.509632][ T3710] syz.0.116[3710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.522590][ T320] bridge_slave_1: left allmulticast mode [ 31.539669][ T320] bridge_slave_1: left promiscuous mode [ 31.545288][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.569506][ T320] bridge_slave_0: left allmulticast mode [ 31.570987][ T3714] loop0: detected capacity change from 0 to 128 [ 31.575156][ T320] bridge_slave_0: left promiscuous mode [ 31.587162][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.706455][ T320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.726745][ T320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.745849][ T320] bond0 (unregistering): Released all slaves [ 31.769508][ T3680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.785363][ T3680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.849715][ T3680] team0: Port device team_slave_0 added [ 31.867968][ T3680] team0: Port device team_slave_1 added [ 31.907311][ T320] hsr_slave_0: left promiscuous mode [ 31.916226][ T320] hsr_slave_1: left promiscuous mode [ 31.922796][ T3742] loop2: detected capacity change from 0 to 128 [ 31.940055][ T320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.947509][ T320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.955545][ T320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.963070][ T320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.979403][ T320] veth1_macvtap: left promiscuous mode [ 31.984934][ T320] veth0_macvtap: left promiscuous mode [ 31.990637][ T320] veth1_vlan: left promiscuous mode [ 31.995845][ T320] veth0_vlan: left promiscuous mode [ 32.027060][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 32.113209][ T320] team0 (unregistering): Port device team_slave_1 removed [ 32.134937][ T320] team0 (unregistering): Port device team_slave_0 removed [ 32.176817][ T3680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.183843][ T3680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.209870][ T3680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.228391][ T3680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.235330][ T3680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.261323][ T3680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.273441][ T3774] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.323775][ T3774] cgroup: subsys name conflicts with all [ 32.344087][ T3782] @: renamed from vlan0 (while UP) [ 32.362737][ T3680] hsr_slave_0: entered promiscuous mode [ 32.378487][ T3680] hsr_slave_1: entered promiscuous mode [ 32.533931][ T3808] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.541222][ T3808] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.548547][ T3808] bridge0: entered allmulticast mode [ 32.562116][ T3808] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.569262][ T3808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.576675][ T3808] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.583740][ T3808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.591105][ T3808] bridge0: entered promiscuous mode [ 32.604849][ T3810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 32.709935][ T3721] chnl_net:caif_netlink_parms(): no params data found [ 32.752520][ T3767] chnl_net:caif_netlink_parms(): no params data found [ 32.788686][ T320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.849259][ T320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.870551][ T3721] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.877715][ T3721] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.885146][ T3721] bridge_slave_0: entered allmulticast mode [ 32.891721][ T3721] bridge_slave_0: entered promiscuous mode [ 32.920182][ T3721] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.927476][ T3721] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.937149][ T3721] bridge_slave_1: entered allmulticast mode [ 32.943645][ T3721] bridge_slave_1: entered promiscuous mode [ 32.950757][ T3767] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.957965][ T3767] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.965402][ T3767] bridge_slave_0: entered allmulticast mode [ 32.973582][ T3767] bridge_slave_0: entered promiscuous mode [ 32.981278][ T3767] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.988442][ T3767] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.995592][ T3767] bridge_slave_1: entered allmulticast mode [ 33.001957][ T3767] bridge_slave_1: entered promiscuous mode [ 33.011115][ T320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.043738][ T3721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.055839][ T3767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.066377][ T3721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.082275][ T320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.094657][ T3767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.112209][ T3721] team0: Port device team_slave_0 added [ 33.130903][ T3767] team0: Port device team_slave_0 added [ 33.138081][ T3721] team0: Port device team_slave_1 added [ 33.155690][ T3721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.162685][ T3721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.188657][ T3721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.200210][ T3767] team0: Port device team_slave_1 added [ 33.209117][ T3680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.217596][ T3721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.224547][ T3721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.250580][ T3721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.270754][ T3767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.277708][ T3767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.303683][ T3767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.314531][ T3680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.338520][ T3767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.345482][ T3767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.371453][ T3767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.382232][ T3680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.402119][ T3680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.415489][ T3721] hsr_slave_0: entered promiscuous mode [ 33.421769][ T3721] hsr_slave_1: entered promiscuous mode [ 33.427651][ T3721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.435235][ T3721] Cannot create hsr debugfs directory [ 33.452281][ T3767] hsr_slave_0: entered promiscuous mode [ 33.458475][ T3767] hsr_slave_1: entered promiscuous mode [ 33.464325][ T3767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.472004][ T3767] Cannot create hsr debugfs directory [ 33.499373][ T320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.545364][ T320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.602419][ T320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.660341][ T320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.680082][ T3680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.695235][ T3680] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.709620][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.716865][ T3297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.743228][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.750309][ T3297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.784926][ T320] bond0: left allmulticast mode [ 33.789817][ T320] bond_slave_0: left allmulticast mode [ 33.795283][ T320] bond_slave_1: left allmulticast mode [ 33.800780][ T320] bond0: left promiscuous mode [ 33.805594][ T320] bond_slave_0: left promiscuous mode [ 33.811050][ T320] bond_slave_1: left promiscuous mode [ 33.816600][ T320] bridge0: port 3(bond0) entered disabled state [ 33.828293][ T320] bridge_slave_1: left allmulticast mode [ 33.834107][ T320] bridge_slave_1: left promiscuous mode [ 33.840067][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.853973][ T320] bridge_slave_0: left allmulticast mode [ 33.859671][ T320] bridge_slave_0: left promiscuous mode [ 33.865391][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.875061][ T320] bridge_slave_1: left allmulticast mode [ 33.880752][ T320] bridge_slave_1: left promiscuous mode [ 33.886587][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.895604][ T320] bridge_slave_0: left allmulticast mode [ 33.901324][ T320] bridge_slave_0: left promiscuous mode [ 33.907049][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.098573][ T320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.108896][ T320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.118900][ T320] bond0 (unregistering): Released all slaves [ 34.128322][ T320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.138620][ T320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.148730][ T320] bond0 (unregistering): Released all slaves [ 34.161239][ T3894] netlink: 'syz.0.155': attribute type 5 has an invalid length. [ 34.225748][ T3680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.234598][ T3767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.244046][ T3767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.253890][ T3767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.267753][ T3767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.279537][ T320] hsr_slave_0: left promiscuous mode [ 34.285071][ T320] hsr_slave_1: left promiscuous mode [ 34.292316][ T320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.299867][ T320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.309702][ T320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.317280][ T320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.329637][ T320] hsr_slave_0: left promiscuous mode [ 34.335258][ T320] hsr_slave_1: left promiscuous mode [ 34.340895][ T320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.348382][ T320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.355999][ T320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.363406][ T320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.373334][ T320] veth1_macvtap: left promiscuous mode [ 34.378894][ T320] veth0_macvtap: left promiscuous mode [ 34.384405][ T320] veth1_vlan: left promiscuous mode [ 34.389780][ T320] veth0_vlan: left promiscuous mode [ 34.395503][ T320] veth1_macvtap: left promiscuous mode [ 34.401039][ T320] veth0_macvtap: left promiscuous mode [ 34.406664][ T320] veth1_vlan: left promiscuous mode [ 34.411910][ T320] veth0_vlan: left promiscuous mode [ 34.550925][ T320] team0 (unregistering): Port device team_slave_1 removed [ 34.563787][ T320] team0 (unregistering): Port device team_slave_0 removed [ 34.635080][ T320] team0 (unregistering): Port device team_slave_1 removed [ 34.645747][ T320] team0 (unregistering): Port device team_slave_0 removed [ 34.731940][ T3767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.757234][ T3767] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.768477][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.775599][ T3297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.789809][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.796906][ T3297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.859346][ T3680] veth0_vlan: entered promiscuous mode [ 34.881811][ T3680] veth1_vlan: entered promiscuous mode [ 34.909861][ T3680] veth0_macvtap: entered promiscuous mode [ 34.920838][ T3767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.931362][ T3721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.942236][ T3680] veth1_macvtap: entered promiscuous mode [ 34.957289][ T3721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.968632][ T3721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.981902][ T3721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.003753][ T3680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.014369][ T3680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.024295][ T3680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.034814][ T3680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.058813][ T3680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.080044][ T3680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.090548][ T3680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.100378][ T3680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.110949][ T3680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.126635][ T3680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.146480][ T3680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.155215][ T3680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.164045][ T3680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.172938][ T3680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.187498][ T3767] veth0_vlan: entered promiscuous mode [ 35.204166][ T3767] veth1_vlan: entered promiscuous mode [ 35.235271][ T3721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.256005][ T3767] veth0_macvtap: entered promiscuous mode [ 35.284990][ T3721] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.298658][ T3767] veth1_macvtap: entered promiscuous mode [ 35.313474][ T3767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.324126][ T3767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.333958][ T3767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.344478][ T3767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.354322][ T3767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.364954][ T3767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.389333][ T3767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.413290][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.420428][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.431189][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.438264][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.459184][ T3721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.469412][ T4009] x_tables: ip_tables: ah match: only valid for protocol 51 [ 35.469558][ T3721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.494547][ T3999] pim6reg1: entered promiscuous mode [ 35.499934][ T3999] pim6reg1: entered allmulticast mode [ 35.545656][ T3767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.556116][ T3767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.565989][ T3767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.576615][ T3767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.586566][ T3767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.597063][ T3767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.609727][ T3767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.629075][ T3767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.637967][ T3767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.646811][ T3767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.655544][ T3767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.683730][ T4025] process 'syz.2.173' launched './file0' with NULL argv: empty string added [ 35.750344][ T3397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3397 comm=kworker/1:5 [ 35.772819][ T3721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.848561][ T4034] loop3: detected capacity change from 0 to 1024 [ 35.905593][ T4034] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 35.918292][ T4034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.952799][ T3721] veth0_vlan: entered promiscuous mode [ 35.960859][ T4034] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 35.961371][ T3721] veth1_vlan: entered promiscuous mode [ 35.987215][ T3721] veth0_macvtap: entered promiscuous mode [ 35.994604][ T3721] veth1_macvtap: entered promiscuous mode [ 36.005824][ T3721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.016303][ T3721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.026239][ T3721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.035294][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 36.035305][ T29] audit: type=1400 audit(1725868782.008:481): avc: denied { read } for pid=4076 comm="syz.2.189" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.036777][ T3721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.068095][ T29] audit: type=1400 audit(1725868782.018:482): avc: denied { open } for pid=4076 comm="syz.2.189" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.075489][ T3721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.109333][ T3721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.119157][ T3721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.129845][ T3721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.143284][ T3721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.149513][ T29] audit: type=1400 audit(1725868782.118:483): avc: denied { ioctl } for pid=4076 comm="syz.2.189" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.151572][ T3721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.186150][ T3721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.196182][ T3721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.196195][ T3721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.196209][ T3721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.196219][ T3721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.196232][ T3721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.196243][ T3721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.203166][ T3721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.217332][ T4075] netlink: 216 bytes leftover after parsing attributes in process `syz.1.187'. [ 36.233070][ T3721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.281957][ T4075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.187'. [ 36.282810][ T3721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.300488][ T3721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.309295][ T3721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.331117][ T3767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.363087][ T29] audit: type=1400 audit(1725868782.338:484): avc: denied { mount } for pid=4082 comm="syz.2.192" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.395723][ T29] audit: type=1400 audit(1725868782.358:485): avc: denied { read } for pid=4083 comm="syz.3.193" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.418855][ T29] audit: type=1400 audit(1725868782.358:486): avc: denied { open } for pid=4083 comm="syz.3.193" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.442989][ T29] audit: type=1400 audit(1725868782.368:487): avc: denied { mount } for pid=3721 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.478745][ T29] audit: type=1400 audit(1725868782.448:488): avc: denied { unmount } for pid=3266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.501371][ T29] audit: type=1400 audit(1725868782.458:489): avc: denied { map } for pid=4092 comm="syz.2.195" path="socket:[7284]" dev="sockfs" ino=7284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 36.524521][ T4091] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 36.539106][ T4095] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.587111][ T4085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.598491][ T29] audit: type=1400 audit(1725868782.568:490): avc: denied { read } for pid=4100 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.600357][ T4101] loop4: detected capacity change from 0 to 1024 [ 36.627898][ T4085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.637200][ T4095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.663967][ T4101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.680923][ T4101] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 36.703149][ T4101] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 36.715771][ T4101] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.715771][ T4101] [ 36.725810][ T4101] EXT4-fs (loop4): Total free blocks count 0 [ 36.731838][ T4101] EXT4-fs (loop4): Free/Dirty block details [ 36.737857][ T4101] EXT4-fs (loop4): free_blocks=68451041280 [ 36.743717][ T4101] EXT4-fs (loop4): dirty_blocks=16 [ 36.748910][ T4101] EXT4-fs (loop4): Block reservation details [ 36.754987][ T4101] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 36.767804][ T4111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 36.770402][ T4095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.830555][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 36.875095][ T4095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.890996][ T4126] netlink: 264 bytes leftover after parsing attributes in process `syz.4.209'. [ 36.941110][ T4132] pim6reg1: entered promiscuous mode [ 36.946508][ T4132] pim6reg1: entered allmulticast mode [ 36.970780][ T4095] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.982059][ T4095] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.995250][ T4095] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.006119][ T4095] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.238335][ T4146] syz.3.217[4146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.238388][ T4146] syz.3.217[4146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.371787][ T4156] loop3: detected capacity change from 0 to 512 [ 37.390230][ T4156] EXT4-fs: Ignoring removed bh option [ 37.396119][ T4156] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 37.406295][ T4156] EXT4-fs (loop3): 1 truncate cleaned up [ 37.412514][ T4156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.440385][ T3767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.607870][ C0] hrtimer: interrupt took 30458 ns [ 37.657375][ T4169] Invalid ELF header type: 0 != 1 [ 37.746019][ T4178] bridge0: port 3(veth0_to_bridge) entered blocking state [ 37.753263][ T4178] bridge0: port 3(veth0_to_bridge) entered disabled state [ 37.760987][ T4178] veth0_to_bridge: entered allmulticast mode [ 37.767746][ T4178] veth0_to_bridge: entered promiscuous mode [ 37.773764][ T4178] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 37.786475][ T4178] bridge0: port 3(veth0_to_bridge) entered blocking state [ 37.793728][ T4178] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 37.838342][ T4184] syz.3.233[4184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.838395][ T4184] syz.3.233[4184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.912587][ T4193] syzkaller0: entered promiscuous mode [ 37.929449][ T4193] syzkaller0: entered allmulticast mode [ 38.031431][ T4204] loop2: detected capacity change from 0 to 512 [ 38.039360][ T4204] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.057853][ T4204] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.239: bg 0: block 127: padding at end of block bitmap is not set [ 38.067300][ T4210] batman_adv: batadv0: Adding interface: ipvlan2 [ 38.078422][ T4210] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.080170][ T4204] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 38.103815][ T4210] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 38.124948][ T4204] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.239: invalid indirect mapped block 1 (level 1) [ 38.140717][ T4204] EXT4-fs (loop2): 1 truncate cleaned up [ 38.147290][ T4204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.177723][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.218191][ T4215] loop1: detected capacity change from 0 to 512 [ 38.225082][ T4215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.245655][ T4215] EXT4-fs (loop1): 1 truncate cleaned up [ 38.255402][ T4215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.301054][ T3680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.310719][ T4235] loop3: detected capacity change from 0 to 512 [ 38.329668][ T4235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.343271][ T4235] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.445906][ T3767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.569176][ T4272] bridge0: port 3(vlan2) entered blocking state [ 38.575527][ T4272] bridge0: port 3(vlan2) entered disabled state [ 38.582862][ T4272] vlan2: entered allmulticast mode [ 38.588599][ T4272] vlan2: left allmulticast mode [ 38.661589][ T4280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.272'. [ 38.712880][ T4283] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.720836][ T4283] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 38.810865][ T4288] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.003247][ T4300] loop1: detected capacity change from 0 to 512 [ 39.009860][ T4300] EXT4-fs: Ignoring removed i_version option [ 39.016162][ T4300] EXT4-fs: Mount option(s) incompatible with ext3 [ 39.051803][ T4300] loop1: detected capacity change from 0 to 8192 [ 39.059251][ T4300] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.150337][ T4309] loop1: detected capacity change from 0 to 512 [ 39.168311][ T4309] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.284: Failed to acquire dquot type 0 [ 39.179660][ T4309] EXT4-fs (loop1): Remounting filesystem read-only [ 39.186220][ T4309] EXT4-fs (loop1): 1 orphan inode deleted [ 39.192786][ T4309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.205406][ T4309] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 39.212288][ T4309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.268988][ T4316] loop1: detected capacity change from 0 to 256 [ 39.363857][ T4328] loop2: detected capacity change from 0 to 512 [ 39.445115][ T4333] loop2: detected capacity change from 0 to 256 [ 39.562204][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 39.576215][ T4351] serio: Serial port ptm0 [ 39.614601][ T4357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'. [ 39.646454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.658716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.670910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.683092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.695271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.704467][ T4368] loop3: detected capacity change from 0 to 256 [ 39.707432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.725686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.737844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.750077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.762183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:4b:15:47:71:5e, vlan:0) [ 39.878022][ T3767] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 39.885712][ T3767] FAT-fs (loop3): Filesystem has been set read-only [ 39.924726][ T3767] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 39.958830][ T4378] netlink: 'syz.4.313': attribute type 4 has an invalid length. [ 40.073589][ T4387] syzkaller0: entered allmulticast mode [ 40.202333][ T4383] syzkaller0 (unregistering): left allmulticast mode [ 40.265316][ T4385] pim6reg1: entered promiscuous mode [ 40.270779][ T4385] pim6reg1: entered allmulticast mode [ 40.378461][ T4396] loop1: detected capacity change from 0 to 128 [ 40.515128][ T3273] kworker/u8:5: attempt to access beyond end of device [ 40.515128][ T3273] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 40.593403][ T4405] loop1: detected capacity change from 0 to 512 [ 40.608859][ T4405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.622262][ T4405] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.669031][ T3680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.075358][ T3273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.180780][ T3273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.240966][ T3273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.305682][ T4425] chnl_net:caif_netlink_parms(): no params data found [ 41.360363][ T3273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.388408][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.395506][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.403206][ T4425] bridge_slave_0: entered allmulticast mode [ 41.411289][ T4425] bridge_slave_0: entered promiscuous mode [ 41.419232][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.426341][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.433720][ T4425] bridge_slave_1: entered allmulticast mode [ 41.440272][ T4425] bridge_slave_1: entered promiscuous mode [ 41.471747][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 41.471825][ T29] audit: type=1400 audit(1725868787.448:691): avc: denied { bind } for pid=4439 comm="syz.0.333" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.498048][ T29] audit: type=1400 audit(1725868787.448:692): avc: denied { node_bind } for pid=4439 comm="syz.0.333" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 41.552101][ T29] audit: type=1400 audit(1725868787.498:693): avc: denied { connect } for pid=4439 comm="syz.0.333" laddr=172.20.20.170 lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.014986][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.337'. [ 42.028117][ T4425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.080395][ T4425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.089980][ T3273] veth0_to_bridge: left allmulticast mode [ 42.095794][ T3273] veth0_to_bridge: left promiscuous mode [ 42.101625][ T3273] bridge0: port 3(veth0_to_bridge) entered disabled state [ 42.111000][ T3273] bridge_slave_1: left allmulticast mode [ 42.116712][ T3273] bridge_slave_1: left promiscuous mode [ 42.120103][ T29] audit: type=1400 audit(1725868788.098:694): avc: denied { listen } for pid=4458 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.122441][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.150530][ T3273] bridge_slave_0: left allmulticast mode [ 42.156239][ T3273] bridge_slave_0: left promiscuous mode [ 42.162018][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.170813][ T29] audit: type=1400 audit(1725868788.158:695): avc: denied { accept } for pid=4458 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.221753][ T29] audit: type=1400 audit(1725868788.198:696): avc: denied { setopt } for pid=4463 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.276653][ T29] audit: type=1400 audit(1725868788.258:697): avc: denied { setattr } for pid=4469 comm="syz.1.345" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.319026][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.329799][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.340144][ T3273] bond0 (unregistering): Released all slaves [ 42.362528][ T4425] team0: Port device team_slave_0 added [ 42.370388][ T4425] team0: Port device team_slave_1 added [ 42.385722][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.392751][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.418752][ T4425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.430315][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.437292][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.463265][ T4425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.505140][ T29] audit: type=1400 audit(1725868788.478:698): avc: denied { unmount } for pid=3680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.527562][ T4425] hsr_slave_0: entered promiscuous mode [ 42.538752][ T4425] hsr_slave_1: entered promiscuous mode [ 42.546102][ T29] audit: type=1326 audit(1725868788.518:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e5dcef9 code=0x7ffc0000 [ 42.569688][ T4425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.578955][ T4425] Cannot create hsr debugfs directory [ 42.588979][ T3273] hsr_slave_0: left promiscuous mode [ 42.596004][ T29] audit: type=1326 audit(1725868788.518:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e5dcef9 code=0x7ffc0000 [ 42.596324][ T3273] hsr_slave_1: left promiscuous mode [ 42.649083][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.656931][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.673479][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.680954][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.689426][ T3273] batman_adv: batadv0: Removing interface: ipvlan2 [ 42.706560][ T3273] veth1_macvtap: left promiscuous mode [ 42.712121][ T3273] veth0_macvtap: left promiscuous mode [ 42.717676][ T3273] veth1_vlan: left promiscuous mode [ 42.722905][ T3273] veth0_vlan: left promiscuous mode [ 42.763064][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 42.770668][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.778505][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.785934][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.793425][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.800941][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.808490][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.815934][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.823565][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.831045][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.838531][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.845902][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.853352][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.860732][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.868733][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.876113][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 42.883510][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.890961][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.898516][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.905877][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.913407][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.920896][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.928446][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.935883][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.943427][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.950890][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.958445][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.965816][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.973368][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.980852][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.988388][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.995758][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.003313][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.010969][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.018489][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.026440][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.033825][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.041259][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.048770][ T3667] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.057273][ T3667] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 43.149010][ T3273] team0 (unregistering): Port device team_slave_1 removed [ 43.161551][ T3273] team0 (unregistering): Port device team_slave_0 removed [ 43.204292][ T4527] loop4: detected capacity change from 0 to 1024 [ 43.215501][ T4506] geneve0: entered allmulticast mode [ 43.219363][ T4527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.262736][ T40] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.277991][ T40] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 43.290254][ T40] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.290254][ T40] [ 43.299886][ T40] EXT4-fs (loop4): Total free blocks count 0 [ 43.305916][ T40] EXT4-fs (loop4): Free/Dirty block details [ 43.311826][ T40] EXT4-fs (loop4): free_blocks=68451041280 [ 43.317695][ T40] EXT4-fs (loop4): dirty_blocks=64 [ 43.322802][ T40] EXT4-fs (loop4): Block reservation details [ 43.328846][ T40] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 43.335958][ T3721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.572573][ T4547] loop4: detected capacity change from 0 to 164 [ 43.691999][ T4425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.700661][ T4425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.710438][ T4425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.721024][ T4425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.763150][ T4425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.777629][ T4425] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.788489][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.795577][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.815553][ T4425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.825975][ T4425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.839975][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.847051][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.917368][ T4425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.991599][ T4425] veth0_vlan: entered promiscuous mode [ 44.000473][ T4425] veth1_vlan: entered promiscuous mode [ 44.017374][ T4425] veth0_macvtap: entered promiscuous mode [ 44.024829][ T4425] veth1_macvtap: entered promiscuous mode [ 44.037055][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.047541][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.057726][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.068291][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.078138][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.088711][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.098535][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.109040][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.122797][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.134371][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.144861][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.154684][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.165192][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.175150][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.185661][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.195677][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.206235][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.217240][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.229165][ T4425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.237906][ T4425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.246876][ T4425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.255612][ T4425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.354498][ T4578] loop4: detected capacity change from 0 to 1024 [ 44.361349][ T4578] EXT4-fs: Ignoring removed oldalloc option [ 44.378430][ T4578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.437488][ T3721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.474152][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 44.483004][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 44.615266][ T4611] loop4: detected capacity change from 0 to 256 [ 44.793696][ T4632] loop2: detected capacity change from 0 to 512 [ 44.802872][ T4632] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.400: corrupted in-inode xattr: invalid ea_ino [ 44.818164][ T4632] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.400: couldn't read orphan inode 15 (err -117) [ 44.830502][ T4632] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.850772][ T4638] loop4: detected capacity change from 0 to 512 [ 44.857320][ T4638] EXT4-fs: Ignoring removed i_version option [ 44.863330][ T4638] EXT4-fs: Ignoring removed nobh option [ 44.869816][ T4638] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.880880][ T4638] EXT4-fs (loop4): 1 truncate cleaned up [ 44.881887][ T3266] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 44.887784][ T4638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.949598][ T3721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.043167][ T4657] syz.2.412[4657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.043225][ T4657] syz.2.412[4657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.086108][ T4662] Cannot find set identified by id 0 to match [ 45.128279][ T4665] loop4: detected capacity change from 0 to 512 [ 45.136188][ T4668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.415'. [ 45.148548][ T4665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.161176][ T4665] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.174665][ T4665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.213085][ T4678] tipc: Started in network mode [ 45.218065][ T4678] tipc: Node identity 621fcf5a8dc9, cluster identity 4711 [ 45.225234][ T4678] tipc: Enabled bearer , priority 21 [ 45.233236][ T4678] €Â: renamed from syzkaller0 [ 45.245824][ T4678] tipc: Disabling bearer [ 45.291468][ C1] net_ratelimit: 20929 callbacks suppressed [ 45.291487][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.355856][ T4694] netlink: 'syz.2.427': attribute type 10 has an invalid length. [ 45.365160][ T4694] bond0: (slave bond_slave_0): Releasing backup interface [ 45.397628][ T4696] loop1: detected capacity change from 0 to 2048 [ 45.409821][ T4696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.454401][ T3680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.017744][ T4733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.027227][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.034648][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.042116][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.049569][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.056981][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.064493][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.071910][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.079327][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.086721][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.094177][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.101578][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.108975][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.116360][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.123738][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.131218][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.138639][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.146077][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.153552][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.160947][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.168384][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.175756][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.183166][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.190568][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.198025][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.205492][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.212978][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.220376][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.227796][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.235236][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.242640][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.250056][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.257467][ T3397] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.264921][ T4733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.276598][ T3397] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 46.410429][ T4752] syz.2.448[4752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.410499][ T4752] syz.2.448[4752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.484098][ T4755] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.608652][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 46.618198][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 46.709881][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 46.709895][ T29] audit: type=1400 audit(1725868792.688:759): avc: denied { mount } for pid=4780 comm="syz.1.460" name="/" dev="configfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 46.763528][ T29] audit: type=1400 audit(1725868792.728:760): avc: denied { search } for pid=4780 comm="syz.1.460" name="/" dev="configfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.785533][ T29] audit: type=1400 audit(1725868792.728:761): avc: denied { read } for pid=4780 comm="syz.1.460" name="/" dev="configfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.807415][ T29] audit: type=1400 audit(1725868792.728:762): avc: denied { open } for pid=4780 comm="syz.1.460" path="/" dev="configfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.846916][ T4786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.462'. [ 46.872338][ T4784] rdma_op ffff888116a86980 conn xmit_rdma 0000000000000000 [ 46.904210][ T4784] SELinux: failed to load policy [ 46.906409][ T29] audit: type=1400 audit(1725868792.878:763): avc: denied { load_policy } for pid=4783 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 46.974338][ T4792] bridge_slave_0: left allmulticast mode [ 46.980116][ T4792] bridge_slave_0: left promiscuous mode [ 46.985831][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.995944][ T4792] bridge_slave_1: left allmulticast mode [ 47.001772][ T4792] bridge_slave_1: left promiscuous mode [ 47.007685][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.019996][ T4792] bond0: (slave bond_slave_0): Releasing backup interface [ 47.066837][ T4792] bond0: (slave bond_slave_1): Releasing backup interface [ 47.119113][ T4792] team0: Port device team_slave_0 removed [ 47.135947][ T4792] team0: Port device team_slave_1 removed [ 47.157404][ T4792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.164816][ T4792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.182961][ T4792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.190640][ T4792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.229221][ T4802] loop2: detected capacity change from 0 to 512 [ 47.235815][ T4802] EXT4-fs: Ignoring removed nobh option [ 47.242827][ T4802] EXT4-fs: Ignoring removed nobh option [ 47.244494][ T4792] team0: Port device netdevsim1 removed [ 47.253893][ T4802] EXT4-fs (loop2): failed to initialize system zone (-117) [ 47.261978][ T4802] EXT4-fs (loop2): mount failed [ 47.276596][ T4796] tipc: New replicast peer: 71.1.1.1 [ 47.281973][ T4796] tipc: Enabled bearer , priority 10 [ 47.356726][ T29] audit: type=1326 audit(1725868793.338:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617dd0cef9 code=0x7ffc0000 [ 47.380036][ T29] audit: type=1326 audit(1725868793.338:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617dd0cef9 code=0x7ffc0000 [ 47.406590][ T29] audit: type=1326 audit(1725868793.388:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f617dd0cef9 code=0x7ffc0000 [ 47.430976][ T29] audit: type=1326 audit(1725868793.418:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617dd0cef9 code=0x7ffc0000 [ 47.454328][ T29] audit: type=1326 audit(1725868793.418:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617dd0cef9 code=0x7ffc0000 [ 47.484400][ T4817] loop1: detected capacity change from 0 to 1024 [ 47.567438][ T4821] loop0: detected capacity change from 0 to 1024 [ 47.587000][ T4821] EXT4-fs: Ignoring removed bh option [ 47.626645][ T4821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.664414][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.831804][ T3266] ================================================================== [ 47.839900][ T3266] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 47.847271][ T3266] [ 47.849583][ T3266] read-write to 0xffff888107e84668 of 4 bytes by task 4807 on cpu 1: [ 47.857636][ T3266] mem_cgroup_iter+0x28e/0x380 [ 47.862392][ T3266] shrink_node+0x74a/0x1d40 [ 47.866890][ T3266] do_try_to_free_pages+0x3c6/0xc50 [ 47.872086][ T3266] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 47.877988][ T3266] try_charge_memcg+0x2bc/0x810 [ 47.882830][ T3266] obj_cgroup_charge_pages+0xbd/0x1a0 [ 47.888195][ T3266] __memcg_kmem_charge_page+0x9d/0x170 [ 47.893653][ T3266] __alloc_pages_noprof+0x1bc/0x360 [ 47.898859][ T3266] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 47.904231][ T3266] alloc_pages_noprof+0xe1/0x100 [ 47.909191][ T3266] __vmalloc_node_range_noprof+0x736/0xec0 [ 47.914986][ T3266] bpf_map_area_alloc+0xd8/0x110 [ 47.919919][ T3266] array_map_alloc+0x1c2/0x390 [ 47.924672][ T3266] map_create+0x83c/0xb90 [ 47.928985][ T3266] __sys_bpf+0x667/0x7a0 [ 47.933210][ T3266] __x64_sys_bpf+0x43/0x50 [ 47.937614][ T3266] x64_sys_call+0x2625/0x2d60 [ 47.942365][ T3266] do_syscall_64+0xc9/0x1c0 [ 47.946853][ T3266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.952737][ T3266] [ 47.955047][ T3266] read to 0xffff888107e84668 of 4 bytes by task 3266 on cpu 0: [ 47.962569][ T3266] mem_cgroup_iter+0x93/0x380 [ 47.967230][ T3266] shrink_node+0x74a/0x1d40 [ 47.971722][ T3266] do_try_to_free_pages+0x3c6/0xc50 [ 47.976912][ T3266] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 47.982796][ T3266] try_charge_memcg+0x2bc/0x810 [ 47.987632][ T3266] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 47.993687][ T3266] __read_swap_cache_async+0x2b7/0x520 [ 47.999135][ T3266] swap_cluster_readahead+0x276/0x3f0 [ 48.004495][ T3266] swapin_readahead+0xe4/0x760 [ 48.009250][ T3266] do_swap_page+0x3da/0x1ef0 [ 48.013829][ T3266] handle_mm_fault+0x8cb/0x2a30 [ 48.018667][ T3266] exc_page_fault+0x3b9/0x650 [ 48.023334][ T3266] asm_exc_page_fault+0x26/0x30 [ 48.028177][ T3266] [ 48.030483][ T3266] value changed: 0x0000002b -> 0x00000030 [ 48.036183][ T3266] [ 48.038488][ T3266] Reported by Kernel Concurrency Sanitizer on: [ 48.044623][ T3266] CPU: 0 UID: 0 PID: 3266 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller #0 [ 48.053717][ T3266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 48.063756][ T3266] ================================================================== [ 48.106899][ T4847] loop1: detected capacity change from 0 to 2048 [ 48.117725][ T4847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.189052][ T4848] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 48.206410][ T4848] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1736 with error 28 [ 48.218885][ T4848] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.218885][ T4848] [ 48.228645][ T4848] EXT4-fs (loop1): Total free blocks count 0 [ 48.234619][ T4848] EXT4-fs (loop1): Free/Dirty block details [ 48.240526][ T4848] EXT4-fs (loop1): free_blocks=66060288 [ 48.246064][ T4848] EXT4-fs (loop1): dirty_blocks=2848 [ 48.251368][ T4848] EXT4-fs (loop1): Block reservation details [ 48.257404][ T4848] EXT4-fs (loop1): i_reserved_data_blocks=181 [ 48.356325][ T3667] tipc: Node number set to 4023832410 [ 48.431427][ T3273] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1736 with max blocks 2048 with error 28